thawkhant Goto Github PK

adrecon

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

aung_chan_thar_hotel

awesome-bugbounty-writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

awesome-web-hacking

A list of web application security

bloodhound.py

A Python based ingestor for BloodHound that can run from non domain join machine

cc-attack

Using Socks4/5 or http proxies to make a multithreading Http-flood/Https-flood (cc) attack.

css-bg-border

When you use eight values specifying border-radius in CSS, you can build organic looking shapes. Simply use our Generator at

cssanimatinonbatch2

dalfox

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

detection-rules

Rules for Elastic Security's detection engine

dirtycow

Dirty Cow exploit - CVE-2016-5195

dons

Dons Js Scanner is a sleek command-line tool that hunts for hidden treasures—API keys, credentials, and secrets—lurking in the JavaScript of websites. Its vibrant ASCII art logo welcomes users to a journey where it scans, reveals, and safeguards against potential security breaches.

e-book-collections

ejpt-cheatsheet

english

English

ewpt-preparation

eyewitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

feroxbuster_dirsearch

A fast, simple, recursive content discovery tool written in Rust.

hack-tools

The all-in-one Red Team extension for Web Pentester 🛠

hello-game

homework

impacket

Impacket is a collection of Python classes for working with network protocols.

jquery

js-smallapp-2

js-smallapp-3

js-smallproject-1

kerbrute

A tool to perform Kerberos pre-auth bruteforcing

kernel-exploits

kingofbugbountytips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..